Nua Security's open source benchmarks for Penetration Testing AI Agents
446
WARNING: This is a deliberately vulnerable application built for security training purposes only. It contains intentional vulnerabilities and must never be deployed in a production environment or used with real data.
An e-commerce store with product listings, reviews, checkout, promo codes, and an invoice generator. Built with PHP, Apache, and MySQL. Contains 20 vulnerabilities spanning SQL injection, XSS, SSTI, IDOR, XXE, path traversal, SSRF, open redirects, and known CVEs.
Images are published at nuasecurity/nua-bench-lab-04.
docker compose pull
docker compose up -d --no-build
Content type
Image
Digest
sha256:35cd77497…
Size
24.8 MB
Last updated
3 months ago
docker pull nuasecurity/nua-bench-lab-04:internal